All articles
26. 9. 2018
2 min read

Will millions fly for GDPR violations?

What are the penalties for non-compliance? Will the Czech Republic regulate them in any way? What is the highest fine so far and who has received it?


It’s quite heated in the House of Commons at the moment. The issue of the level of penalties for municipalities for violation of the new rules on personal data protection has come up for discussion.

If there is a breach of data protection, the current upper limit is set at ten million crowns. The final decision will most likely not be made until sometime in October. The new law is based on a European Union regulation known as the GDPR, which came into force in May.

A very common argument from proponents of lower penalties is that high fines would be devastating for smaller municipalities in the country. Currently, the highest penalty that has been imposed on a municipality was a fine of 80,000 crowns. Black Peter was given to Brno.

There is also a high chance that the parliamentary media committee’s proposal to modify the privacy rules for journalists will be adopted.According to the proposal, there is no substantial change, but as before, personal data can be processed if it serves a reasonable purpose for journalistic purposes or for the purposes of academic, artistic or literary expression. An exception should be made for situations where data are processed for scientific, research and statistical purposes.

If you are wondering about the most catastrophic scenarios, then we can tell you that under the GDPR, a breach can result in a fine of up to €20 million, which is roughly €500 million. However, this fine, according to previous statements, will only be faced by large multinational companies.

Have a project?

Get in touch and we'll discuss how we can help.
Contact us

More articles

1 Aug 2026

Cyber Resilience Act: New Rules for Secure Software and Digital Products

The European Union is introducing another important regulation in the field of cybersecurity. It is called the Cyber Resilience Act, or CRA for short, and applies to all products with a digital component. This means not only smart devices, but also software, applications, and systems that connect to a network or communicate with another service…
Read the article
15 Jul 2026

Withdrawal button – Wontilles responds in advance to new legislative requirements

The legislative environment in the field of e-commerce is undergoing constant changes, which place high demands on online shop operators.
Read the article
1 Jun 2026

Railsformers at the Faculty of Arts at the OU: Ruby on Rails in practice and now also in IT business

At the Faculty of Science of the University of Ostrava, we have long been giving students practical experience with Ruby on Rails development and showing them what it looks like to work on real web applications. From the original pilot course, we have developed a stable course Ruby on Rails I and II, which we…
Read the article